3 ms·
Python pickles have the same issue but it is a design decision per the docs. Python docs > library > pickle: https://docs.python.org/3/library/pickle.html http
by westurner 2y ago
Python pickles have the same issue but it is a design decision per the docs.
Python docs > library > pickle: https://docs.python.org/3/library/pickle.html https://docs.python.org/3/library/pickle.html
Re: a hypothetical pickle parser protocol that doesn't eval code at parse time; "skipcode pickle protocol 6:
"AI Supply Chain Attack: How Malicious Pickle Files Backdoor Models" .. "Insecurity and Python Pickles" : https://news.ycombinator.com/item?id=43426963 https://news.ycombinator.com/item?id=43426963
- deleted 2y ago[deleted]
- echoangle 2y agoBut python pickle is only supposed to be used with trusted input, so it’s not a vulnerability.